I finally just got this figured out on iOS using Application authentication.
I was getting my token ok - but when I submitted the token with the user timeline request, it was giving me bad authentication. Reading thru the doc I thought it told me to convert my token to base64. but apparently it was already being returned to me base64. once I changed that, all is well. the rest of my code worked as before with API 1. whew!